1978 CHAPTER 129: HWTACACS CONFIGURATION COMMANDS

Use the undo hwtacacs nas-ipcommand to remove the configuration.

By default, the source IP address of a packet sent to the server is the IP address of the outbound port.

Note that:

Specifying a source address for the HWTACACS packets to be sent to the server can avoid the situation where the packets sent back by the HWTACACS server cannot reach the device as the result of a physical interface failure.

If you configure the command for more than one time, the last configuration takes effect.

The nas-ipcommand in HWTACACS scheme view is only for the current HWTACACS scheme, while the hwtacacs nas-ipcommand in system view is for all HWTACACS schemes. However, the nas-ipcommand in HWTACACS scheme view overwrites the configuration of the hwtacacs nas-ipcommand.

Related command: nas-ip (HWTACACS scheme view).

Example # Set the IP address for the device to use as the source address of the HWTACACS packets to 129.10.10.1.

<Sysname> system-view

[Sysname] hwtacacs nas-ip 129.10.10.1

hwtacacs scheme

Syntax hwtacacs scheme hwtacacs-scheme-name

undo hwtacacs scheme hwtacacs-scheme-name

View System view

Parameter hwtacacs-scheme-name: HWTACACS scheme name, a case-insensitive string of 1 to 32 characters.

Description Use the hwtacacs scheme command to create an HWTACACS scheme and enter HWTACACS scheme view.

Use the undo hwtacacs scheme command to delete an HWTACACS scheme.

By default, no HWTACACS scheme exists.

Example # Create an HWTACACS scheme named hwt1 and enter HWTACACS scheme view.

<Sysname> system-view

[Sysname] hwtacacs scheme hwt1

[Sysname-hwtacacs-hwt1]

Page 1978
Image 1978
3Com MSR 30, MSR 50 manual Related command nas-ip Hwtacacs scheme view, Undo hwtacacs scheme hwtacacs-scheme-name